PHP2Shell after the emergency release: what patched actually means
The PHP2Shell fixes shipped on 21 October, but worker restarts, vendor backports and the 23 October follow-up still matter. A practical reading of the advisories and the exploitation evidence.